Skip to content
OpenAdvisories

Vendor

Rocket.Chat

16 known vulnerabilities.

Products

Rocket.Chat 14 Rocket.Chat Desktop 1 Mobile 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-65644

    Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpo…

    Rocket.Chat Rocket.Chat
  • High 7.5
    CVE-2026-56845

    An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configu…

    Rocket.Chat Rocket.Chat
  • High 7.5
    CVE-2026-48929

    Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10.13 is vulnerable to unauthen…

    Rocket.Chat Rocket.Chat
  • High 7.5
    CVE-2026-32995

    The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.5, <…

    Rocket.Chat Rocket.Chat
  • High 8.6
    CVE-2024-39713 Public exploit

    Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

    A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

    Rocket.Chat Rocket.Chat rocket.chat npm